Crash in v8::internal::GlobalHandles::MakeWeak |
||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5773649867177984 Fuzzer: inferno_twister Job Type: linux_asan_chrome_v8_arm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000 Crash State: v8::internal::GlobalHandles::MakeWeak v8::V8::MakeWeak blink::ScriptWrappable::setWrapper Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=409589:409828 Minimized Testcase (0.53 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95QeQZC6v6EyyxeD5Mjmb0cdfeCH7i5cOTVSbYqygO995bEdotGxl2ZbniEP8bqjDb8LKa1_LtpsN_sBNJyCqiLn-MQ6ZFnG4fe_NR4tLRfiKyfeqWCOMPZhEdVy0TkdMuO8OvCnqRaKTXJUpTBu21ABnPGGQ?testcase_id=5773649867177984 Issue manually filed by: tkonchada See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Sep 14 2016
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6589138428231680 Fuzzer: lcamtuf_cross_fuzz Job Type: linux_asan_chrome_mp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: v8::internal::GlobalHandles::MakeWeak blink::ScriptWrappable::setWrapper blink::V8DOMWrapper::associateObjectWithWrapper Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_mp&range=417932:417948 Minimized Testcase (19.60 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96gMVCS6FKlU2yAUFvSEOUy4fkQkKpCqRq2VwbQcJDWX3cf2ntEkUSvGuKMZQ1bAv09mJXGhZ3JJuDyADNdLBPo6Ed5LZ083K0KB8iI-zecg8csB_MXfyb4xXJhIArN4tZW3etuwNLGwisa8z-hvNTQdnNEzO7EVZlf2wHQtQxoFKJ2dnI?testcase_id=6589138428231680 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Sep 15 2016
ClusterFuzz has detected this issue as fixed in range 418451:418478. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6589138428231680 Fuzzer: lcamtuf_cross_fuzz Job Type: linux_asan_chrome_mp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: v8::internal::GlobalHandles::MakeWeak blink::ScriptWrappable::setWrapper blink::V8DOMWrapper::associateObjectWithWrapper Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_mp&range=417932:417948 Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_mp&range=418451:418478 Minimized Testcase (19.60 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96gMVCS6FKlU2yAUFvSEOUy4fkQkKpCqRq2VwbQcJDWX3cf2ntEkUSvGuKMZQ1bAv09mJXGhZ3JJuDyADNdLBPo6Ed5LZ083K0KB8iI-zecg8csB_MXfyb4xXJhIArN4tZW3etuwNLGwisa8z-hvNTQdnNEzO7EVZlf2wHQtQxoFKJ2dnI?testcase_id=6589138428231680 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Sep 23 2016
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5256347623096320 Fuzzer: lcamtuf_cross_fuzz Job Type: windows_syzyasan_chrome Platform Id: windows Crash Type: UNKNOWN Crash Address: 0x00000003 Crash State: v8::internal::GlobalHandles::MakeWeak blink::ScriptWrappable::setWrapper blink::DOMDataStore::set Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97opQIIc8k4El1J2vxkZk5XgPRXj6DiUVd_IVftstHXr3g8PnVkv0CWwSEezQa_YEKHuVcPMitV-HD-8lNO1IddPSjYb6zb9enVsaIC6O30Hd9vjCGRFjkUz-8QTdUwyTqYAMnK9FP4gbxWLtL8qJtcYWHHIgKMwAVmOJVVjPyBB23RYfg?testcase_id=5256347623096320 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Dec 1 2016
ClusterFuzz has detected this issue as fixed in range 435133:435159. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5773649867177984 Fuzzer: inferno_twister Job Type: linux_asan_chrome_v8_arm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000 Crash State: v8::internal::GlobalHandles::MakeWeak v8::V8::MakeWeak blink::ScriptWrappable::setWrapper Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=409589:409828 Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=435133:435159 Minimized Testcase (0.53 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95QeQZC6v6EyyxeD5Mjmb0cdfeCH7i5cOTVSbYqygO995bEdotGxl2ZbniEP8bqjDb8LKa1_LtpsN_sBNJyCqiLn-MQ6ZFnG4fe_NR4tLRfiKyfeqWCOMPZhEdVy0TkdMuO8OvCnqRaKTXJUpTBu21ABnPGGQ?testcase_id=5773649867177984 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Dec 28 2016
Issue 676867 has been merged into this issue.
,
Dec 30 2016
ClusterFuzz testcase 5951620597940224 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
||||
►
Sign in to add a comment |
||||
Comment 1 by tkonch...@chromium.org
, Sep 14 2016Labels: M-55 Te-Logged
Owner: haraken@chromium.org
Status: Assigned (was: Untriaged)